Domain > vhr.embed.maxapps.io

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-07-09	76.76.21.21 (ClassC)
2022-01-23	76.76.21.241 (ClassC)
2022-01-23	76.223.121.104 (ClassC)
2022-01-25	76.76.21.9 (ClassC)
2022-01-25	76.223.126.88 (ClassC)
2025-05-29	76.76.21.108 (ClassC)
2025-06-23	18.160.225.121 (ClassC)
2025-06-23	18.160.225.39 (ClassC)
2025-06-23	18.160.225.71 (ClassC)
2025-06-23	18.160.225.76 (ClassC)
2025-08-07	204.246.191.40 (ClassC)
2025-09-15	13.32.205.122 (ClassC)
2025-09-15	13.32.205.124 (ClassC)
2025-09-15	13.32.205.71 (ClassC)
2025-09-15	13.32.205.92 (ClassC)
2026-01-08	3.163.24.27 (ClassC)
2026-01-14	3.163.24.86 (ClassC)

HTTP/1.1 200 OKAccept-Ranges: bytesAccess-Control-Allow-Origin: *Age: 364233Cache-Control: public, max-age0, must-revalidateContent-Disposition: inlineContent-Length: 4070Content-Type: text/html; char

!DOCTYPE html>html langen-us>head>  meta charsetutf-8 />  meta nameviewport contentwidthdevice-width, initial-scale1.0 />  title>Vehicle History Report/title>  link hrefhttps://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css relstylesheet integritysha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC crossoriginanonymous>  script srchttps://unpkg.com/vue@2>/script>  script src/vehicle-history-report.js>/script>  script srchttps://snapshot.carfax.com/latest/dealer-snapshot.js>/script>/head>body>  script>    const fields  vin, buid, uid, env    window.onload  () > {      const params  new URLSearchParams(window.location.search)      fields.forEach(field > {        const preset  params.get(field)        if (preset) document.getElementById(field).value  preset      })      if (!fields.every(field > Boolean(document.getElementById(field).value))) return      generateWC()    }    function generateWC() {      let template  document.getElementById(wc-clean).innerHTML      fields.forEach(field > {        const val  document.getElementById(field).value        template  template.replaceAll(`$${field}`, val)      })      document.querySelector(.wc-container .card-body div).remove()      document.querySelector(.wc-container .card-body).innerHTML  `div>${template}/div>`    }  /script>  div classcontainer pt-4>    div classrow>      div classcol>        div classalert alert-info rolealert>          Fill form below or use query string to fill automatically. E.g.:br>          code>?buid7777888&uid111222&vin1FTEW1E54LFA26939&envstage/code>        /div>      /div>    /div>    div classrow>      div classcol>        div classmb-3>          label forbuid classform-label>buid/label>          input typetext classform-control idbuid placeholderE.g.: 1234512>        /div>        div classmb-3>          label foruid classform-label>uid/label>          input typetext classform-control iduid placeholderE.g.: 1234512>        /div>        div classmb-3>          label forvin classform-label>vin/label>

Subdomains

Date	Domain	IP
appraisal.embed.maxapps.io	2025-05-25	76.76.21.108
vhr.embed.maxapps.io	2025-05-29	76.76.21.108

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > vhr.embed.maxapps.io

Is this malicious?

DNS Resolutions

Port 443

Subdomains